CVE-2011-1871

Windows Vista SP2, Windows Server 2008 SP2/R2/R2 SP1, Windows 7 Gold/SP1 - Denial of Service via Crafted ICMP Messages

Title source: llm
STIX 2.1

Description

Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via a series of crafted ICMP messages, aka "ICMP Denial of Service Vulnerability."

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12971
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA11-221A.html

Scores

EPSS 0.3846
EPSS Percentile 98.4%

Details

CWE
CWE-399
Status published
Products (4)
microsoft/windows_7 (3 CPE variants)
microsoft/windows_server_2008 (3 CPE variants)
microsoft/windows_server_2008 r2 (2 CPE variants)
microsoft/windows_vista
Published Aug 10, 2011
Tracked Since Feb 18, 2026